LASS.EXE Security Account Manager initialization failed

Mauri_63

unread,

May 30, 2007, 12:20:04 PM5/30/07

to

Hi all,

I have 2 server, the first PDC windows 2003 server, and the second BDC
windows 2000 server.

Yesterday after installation of a windows update on both servers i
restarted both the servers, but the BDC windows 2000 server visualizes
a window with the following message:

"Security Account Manager initialization failed because of the
following
error: Directory Service cannot start. Error Status: 0xc00002e1.
Please
click OK to shutdown the system and reboot into Directory Services
Restore Mode, check the event log for more detailed information."

I tried with the instuction published in the article:
http://support.microsoft.com/kb/258062/en-us, but the problem isn't
resolved.

Someone has an idea?
Thanks

regards
Corvarola Maurizio

ctvader

unread,

May 30, 2007, 12:29:28 PM5/30/07

to

Do you have a system state backup of the domain controllers?

Jorge Silva

unread,

May 30, 2007, 12:32:09 PM5/30/07

to

Hi
Can you start the DC in DSRM?
several options:
1 - You can try to recover from Backup.
2 - You can try to repair the DB in DSRM mode.
3 - You can force the demotion of that DC, perform metadata cleanup a nd
re-add again to the Domain as additional DC.

--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services
"Mauri_63" <corvarol...@libero.it> wrote in message
news:1180542004.8...@h2g2000hsg.googlegroups.com...

josephmpaineitala

unread,

Sep 16, 2009, 3:18:01 AM9/16/09

to

You are required to be a member to post replies. After logging in or becoming a member, you will be redirected back to this page.

Posted as a reply to:

LASS.EXE Security Account Manager initialization failed

Hi all,

regards
Corvarola Maurizio

EggHeadCafe - Software Developer Portal of Choice
WCF Workflow Services Using External Data Exchange
http://www.eggheadcafe.com/tutorials/aspnet/3d49fa0d-a120-4977-842a-6dafb17b6d74/wcf-workflow-services-usi.aspx

Meinolf Weber [MVP-DS]

unread,

Sep 16, 2009, 3:26:55 AM9/16/09

to

Hello Joseph,

What exactly did you try? All steps are done without any positive result,
if i understand you correct? Then you should follow as stated in the article
to contact either MS support or install the problem DC from scratch.

And if you are not able to demote it correct, follow this article to cleanup
AD database on the other existing DC:
http://support.microsoft.com/kb/555846/en-us

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

Paul Bergson [MVP-DS]

unread,

Sep 16, 2009, 8:23:18 AM9/16/09

to

I agree with Meinolf. My guess is you don't have a lot of AD experience. I
would suggest you demote this dc and repromote it.

If you loose a dc you need to use ntdsutil and seize the 5 fsmo roles as
well as clean up the metadata within AD.

Run the following on another dc's command prompt
netdom query fsmo

This will tell you if any of the roles was on the lost dc.

Metadata cleanup
http://support.microsoft.com/?id=216498

Seize roles
http://support.microsoft.com/default.aspx?scid=kb;en-us;255504

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4
Microsoft's Thrive IT Pro of the Month - June 2009

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup This

posting is provided "AS IS" with no warranties, and confers no rights.

"Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
news:6cb2911d5a7e8...@msnews.microsoft.com...